PatchTheCVEgit-pull-or-clone vulnerabilities and fixes
Recent CVEs affecting git-pull-or-clone, with upgrade or downgrade steps. 1 tracked.
Also searched as: git pull or clone.
git-pull-or-clone has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-05-01. Highest priority: CVE-2022-24437 (score 67/100).
- CVE-2022-24437 CRITICAL 9.8 UPGRADE The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-
FAQ
How do I fix git-pull-or-clone vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is git-pull-or-clone being exploited right now?
None of the tracked git-pull-or-clone CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which git-pull-or-clone CVE should I patch first?
CVE-2022-24437 currently ranks highest (67/100): The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-.